Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: jDaDirg73MjxAk29+vvm+cHCmBpqJmHt8vlOBHXzcYM=
Subject key identifier: 22:0E:5F:AB:84:BA:28:C6:49:87:A9:84:D1:C1:56:26:2F:85:67:A7
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 019D2771EE4AC17C9DAF421353BD4E79A7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 0574
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: S5c5xKv/a5VM+UYeMtJasQpmMIm9vvgGPmrilHbYzCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ee:4a:c1:7c:9d:af:42:13:53:bd:4e:79:a7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=220e5fab84ba28c64987a984d1c156262f8567a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:e1:f5:93:c0:40:cc:3e:f0:cc:69:b3:b8:
c7:d4:07:e2:e2:5f:2f:d8:bb:b1:6e:da:3d:d7:6b:
94:ff:88:c8:eb:44:63:02:54:0d:ad:17:bb:66:2e:
46:e6:10:c1:86:b8:c0:e0:d8:59:30:47:0d:c8:4c:
d6:84:38:35:b0:e5:a6:41:5a:b1:e9:da:22:c0:0b:
ea:75:cc:a6:94:8c:69:63:42:f9:99:65:fc:8a:a8:
ae:86:13:1c:56:d6:68:b1:5a:21:d6:41:c0:4a:d8:
01:e0:4b:f7:09:e8:5a:52:63:38:33:7c:a9:62:8e:
fd:c9:f2:88:15:08:00:52:26:33:e8:5e:c7:a9:50:
18:ca:b2:e3:87:d0:a7:d7:40:66:24:02:05:0c:d1:
bf:8f:fd:fc:b3:f1:8a:7a:eb:f3:d6:8a:e9:00:0c:
7f:9b:d7:e5:0b:7a:58:22:2a:de:56:1a:93:64:75:
b8:6b:9e:58:54:d2:03:56:0f:0c:b4:14:6d:5a:c0:
41:9a:7b:36:76:c1:ed:82:26:38:49:4d:91:2d:67:
a0:aa:38:cd:f6:e9:b9:ca:60:d9:83:41:63:a1:4c:
8b:dd:57:cf:eb:3b:e5:be:d2:6b:73:bc:70:e5:8e:
7e:7a:e5:9e:69:d6:20:c1:8a:de:cf:37:45:8f:f3:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:5F:AB:84:BA:28:C6:49:87:A9:84:D1:C1:56:26:2F:85:67:A7
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6b:06:a4:1e:e6:84:13:7b:f8:cb:1f:c9:3f:d3:aa:39:e7:
4c:f3:b5:a8:2c:91:eb:5a:1a:79:4e:4b:15:60:06:42:0e:a3:
0b:5c:08:92:7d:aa:fb:15:67:4e:0d:62:94:b6:83:ec:13:1a:
0f:4e:2f:ab:78:8b:3d:8f:2f:08:3b:db:97:83:59:13:09:f2:
de:71:69:5e:d9:52:21:78:e4:06:e5:67:33:38:26:cb:ed:d5:
ff:51:cc:11:d5:ab:25:60:06:74:01:c5:db:66:2c:f3:aa:f3:
48:c2:f7:9c:2e:15:0a:d6:90:fc:4f:58:31:f7:4d:5d:ef:fe:
4a:26:77:50:68:f5:de:0e:e1:26:ee:a7:f3:64:ac:b4:65:27:
e1:7c:06:14:ed:fd:d7:e9:7a:e7:84:40:ee:d4:2e:a0:3e:54:
af:b2:bf:f1:dd:62:51:f3:1c:2a:56:11:15:e9:14:d2:50:32:
31:3f:4b:60:83:3a:97:b2:43:b2:28:a5:90:f7:cf:9a:e9:bc:
77:1c:61:31:b6:ca:8b:9a:10:61:88:01:9e:55:cb:23:47:7a:
50:e3:70:82:45:43:2f:f5:a6:0d:62:d9:bd:c2:ca:3f:f3:21:
58:3e:6a:51:57:0a:a0:7e:f1:79:a0:e5:61:6b:c6:e2:cc:c7:
25:25:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:32 2026 by rpki-client